Skip to content

docs: repair Server560 publication note boundary #400

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chen21019 merged 1 commit into from
Oct 30, 2026
Merged

docs: repair Server560 publication note boundary #400

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 13 additions & 13 deletions docs/releases/server-1.6.560.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,18 @@ Both components passed required CI, same-tree merge and immutable publication.
All original public asset bytes were read back anonymously. Server assembly
and designated live acceptance remain separate pending gates.

## Verified component inputs

- Web 1.6.201 / bridge 0.2.3 producer: `24715414f143e2c58cf53084bd84cbea0922798f`; tag source `18acf40d85061533762e8d0d1b9c1f7be69afe9c`.
- Web archive SHA256: `5bc8142d9322657c5cbae782756c3aa5a45b6537074de8749066492fa8947eb8`.
- Runtime SBOM SHA256: `8b837eb330b9815df48b4256d3bf0c4e215864b996e2be40dd707ec532872503`; lock `d255b74a835ab7c0224d12613baacdf021d8b30d46204a71c22d57f35725666f`.
- Bridge archive SHA256: `aad5cadfd3806b0f2c7339a1585a6bd19f3e61585af91dd4da119514775e7e93`; 13 published assets verified.
- Engine v0.183.360 producer: `72230c8b471312377bae968c0c17d63e8ad97ffb`; tag source `d6845eedd1df5ae8e69cc075d80b166bc8d26731`.
- Engine JAR SHA256: `0ebbd517ee43e113f29cbc14fe542aa7c7900ae28d65d63a12c348b7f0ac9a21`; runtime SBOM `088ce2b94ea1c30a6d1e52e600d2ef45258aeb26cdded784407a91020a19f474`.
- Original Engine CI: 408 suites / 3822 tests / zero failure or error / one existing skip; 12 published assets verified.
- Engine provenance is original GitHub artifact/source/tree evidence; its workflow supplies no native SLSA attestation.
- Catalog 0.20.17 and Compose 0.14.40 retain the qualified original pins from Server559; other component/package inputs are unchanged.

## Behavior and owner boundaries

The matching Web Console 1.6.201 / bridge 0.2.3 and Engine 0.183.360 add bounded
Expand Down Expand Up @@ -40,7 +52,7 @@ launch/Archive, new domains, affected Key/role/cross-ID, layouts and weak-model
cases remain pending. Retain only unaffected immutable evidence.

The baseline remains 243 business groups and 3,089 frontend inventory rows;
this candidate does not complete that inventory. Browser SBOM coverage retains
this release does not complete that inventory. Browser SBOM coverage retains
its recorded limits. KVM HOLD and explicit human ceremonies are not API grants.

## Upgrade and rollback
Expand All @@ -55,15 +67,3 @@ may be required for rollback. Do not delete volumes or plan receipts.
Production, HAProxy, firewall and production data are outside this QA change.
Official Brotli package proof and all other package gates remain exact. No VEX
scope expansion or weakened security threshold is introduced.

## Qualified component coordinates

- Web 1.6.201 / bridge 0.2.3 producer: `24715414f143e2c58cf53084bd84cbea0922798f`; tag source `18acf40d85061533762e8d0d1b9c1f7be69afe9c`.
- Web archive SHA256: `5bc8142d9322657c5cbae782756c3aa5a45b6537074de8749066492fa8947eb8`.
- Runtime SBOM SHA256: `8b837eb330b9815df48b4256d3bf0c4e215864b996e2be40dd707ec532872503`; lock `d255b74a835ab7c0224d12613baacdf021d8b30d46204a71c22d57f35725666f`.
- Bridge archive SHA256: `aad5cadfd3806b0f2c7339a1585a6bd19f3e61585af91dd4da119514775e7e93`; 13 published assets verified.
- Engine v0.183.360 producer: `72230c8b471312377bae968c0c17d63e8ad97ffb`; tag source `d6845eedd1df5ae8e69cc075d80b166bc8d26731`.
- Engine JAR SHA256: `0ebbd517ee43e113f29cbc14fe542aa7c7900ae28d65d63a12c348b7f0ac9a21`; runtime SBOM `088ce2b94ea1c30a6d1e52e600d2ef45258aeb26cdded784407a91020a19f474`.
- Original Engine CI: 408 suites / 3822 tests / zero failure or error / one existing skip; 12 published assets verified.
- Engine provenance is original GitHub artifact/source/tree evidence; its workflow supplies no native SLSA attestation.
- Catalog 0.20.17 and Compose 0.14.40 retain the qualified original pins from Server559; other component/package inputs are unchanged.